RE//verse 2027 is on the way, and you should probably be there! If you know, you know. If you don’t, this is a very good year to fix that. https://re-verse.io/

High level diff of iOS 27.0 vs. iOS 27.0.1 🎉

https://github.com/blacktop/ipsw-diffs/blob/main/27_0_24A437_vs_27_0_1_24A446/README.md

We trust you have received the usual lecture from the local System Administrator.

pagliacci.jpg

It's that time of the year again...

For my birthday, my brother-in-law gave me a 4992-digit hex number that, when used as a seed for Python’s random number generator, makes it so that printing a sequence of “random” ASCII characters actually prints a birthday greeting.

I find it rather amazing that this is possible!

This is the program he sent with the seed:

with open("seed.txt", encoding="ascii") as handle:
seed = int(handle.read().strip(), 0)
r = random.Random(seed)
pending = ""
while True:
character = chr(r.randrange(128))
if pending + character == "\x1e\x1f":
break
print(pending, end="")
pending = character
print()

CVE-2026-88771 - the loaded Citrix footgun went off again, and the screaming noise is back in our ear.

You knew it was coming - enjoy the latest watchTowr Labs blogpost.

https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/

[RSS] RCE in OpenCode (GHSA-632h-h47v-g4x4)

https://securitylabs.datadoghq.com/articles/opencode-upgrade-remote-code-execution/

I know this is going to sound crazy, but what I’d most like in a printer is one where, when I tell it to print something, it prints.

My second problem with computers and IT is that nearly nobody understands software anymore and I feel so-called AI will make this much worse.

[RSS] Cryptographic mass murder

https://www.bfswa.blog/p/cryptographic-mass-murder

[RSS] Aarch64 Rop Cheatsheet

https://binaryru.in/chain-of-thoughts/aarch64-rop-cheatsheet/

[RSS] Dell BOSS-N1 S-MCU Firmware Integrity and Cryptographic Verification Bypass

https://github.com/google/security-research/security/advisories/GHSA-wcfm-jp7m-rffh

[RSS] Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE

https://starlabs.sg/blog/2026/09-dirty-cert-cisco-smart-software-managers-silently-patched-rce/

[RSS] CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018

https://daubois.dev/blog/cve-2026-91766-php-http-redirect-credential-leak/

[RSS] CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2

https://www.safateam.com/intelligence-hub/research/technical-articles/cve-2025-13032-entering-and-breaking-the-avast-antivirus-sandbox-part-2

The #RSS Universe — Readers, Tools & Standards

https://toolbox.rss.here.now/

RIP Sexecutioner :,(

https://www.rollingstone.com/music/music-news/chuck-varga-gwar-founding-member-sexecutioner-dead-obit-1235632356/

@watchTowr

Journalists have tracked down two employees of Kremlin disinformation group Rybar to villas near Berlin, Germany, with the two living comfortably and safe in the decadent EU they villainize each day

https://correctiv.org/aktuelles/russland-ukraine-2/2026/09/24/russischer-kriegskanal-rybar-operiert-von-berlin-aus/

https://istories.media/news/2026/09/24/rabotayushchie-na-z-kanal-ribar-propagandisti-dolmatov-i-chashchukhin-rezidenti-germanii/

@hackaday "Probably the easiest way is to use a known-good and clearly labeled reference magnet. Same poles repel, and opposites attract. But if that’s not available, a simple magnetic compass can help."

So instead of using a clearly labeled reference, you suggest using a clearly labeled reference, got it!